this post created because some chess lovers dowload this files
he is cracked Total war
https://www.reddit.com/r/techsupport/comments/4hyb49/machine_dns_server53_what_is_it/
virusscan.org test file : Engine32.dll and find results
exe files creates dll files
Hacker Id :
c:\windows\system32\riched20.dll
ole32.dll
comctl32.dll
this result is false MD5 c4d483c716f9bca44eaec7b2c8dbc0e5
SHA-1 f33d035c13bd939d14281d3fd1615bfc90e20a20
SHA-256 c902889dd83fbd941b632e20d073d34da61a175a1d9bc6f930462d6ccbea1dd9
Authentihash 169c53f9a2b08c796b2c32dc06ea0fc4189721b2810a8484b5df18d8074950b4
Imphash af259ff2e92553acc666c7197a0a84de
SSDEEP 3072:sc6PKbnv3RzTow0VyS+B4bjDpORM/VTIuizRt5:s6nvtTowMyGrTI3J
File type Win32 DLL
Magic PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bit
File size 149.92 KB (153520 bytes)
History
Creation Time 2018-05-14 09:37:22
Signature Date 2018-05-14 10:37:00
First Submission 2018-05-16 13:31:07
Last Submission 2018-05-23 13:38:44
Last Analysis 2018-06-13 14:09:00
Names
Engine32.dll
Signature Info
Signature Verification
Signed file, valid signature
File Version Information
Date signed 10:37 AM 5/14/2018
Signers
ChessBase - Schachprogramme-Schachdatenbank Verlagsgesellschaft
Symantec Class 3 SHA256 Code Signing CA
VeriSign
Counter Signers
Symantec Time Stamping Services Signer - G4
Symantec Time Stamping Services CA - G2
Thawte Timestamping CA
Portable Executable Info
Header
Target Machine Intel 386 or later processors and compatible processors
Compilation Timestamp 2018-05-14 09:37:22
Entry Point 42407
Contained Sections 6
Sections
Name Virtual Address Virtual Size Raw Size Entropy MD5
.text 4096 87925 88064 6.58 9d74cbfcc35f533a3deaa85c43dcdd8a
.rdata 94208 31820 32256 4.97 62753564b7374282435d276f156476e8
.data 126976 13752 11264 7.11 b8701c90b36e4936b16de1a217d9a310
.gfids 143360 264 512 2.07 b189a56b8f028d3c3cf68abce6e750d1
.rsrc 147456 480 512 4.72 daefabcc5853733844632a0d26725281
.reloc 151552 6612 6656 6.53 2a47337ebb4056f3c68685d63234b052
Imports
KERNEL32.dll
SHELL32.dll
ole32.dll
Exports
Engine32
Contained Resources By Type
RT_MANIFEST 1
Contained Resources By Language
ENGLISH US 1
Contained Resources
SHA-256 File Type Type Language
4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df ASCII text RT_MANIFEST ENGLISH US
ExifTool File Metadata
CodeSize 88064
EntryPoint 0xa5a7
FileType Win32 DLL
FileTypeExtension dll
ImageVersion 0.0
InitializedDataSize 53760
LinkerVersion 14.0
MIMEType application/octet-stream
MachineType Intel 386 or later, and compatibles
OSVersion 6.0
PEType PE32
Subsystem Windows GUI
SubsystemVersion 6.0
TimeStamp 2018:05:14 10:37:22+01:00
UninitializedDataSize 0
VirusTotal
Adware.Agent.abst
id : <MACHINE_DNS_SERVER>:53 (UDP)
Name
2017-02-13
13
/ 56
Win32 EXE
VsHub.exe
2018-09-15
42
/ 67
Win32 EXE
MSPDBSRV.EXE
2017-09-23
4
/ 64
Win32 EXE
DeskGoSetup
2018-04-26
0
/ 67
Win32 EXE
0
2018-05-03
0
/ 67
Win32 EXE
0
2018-05-12
0
/ 66
Win32 EXE
0
2018-06-09
1
/ 68
Win32 EXE
QQMusicDownloader.exe
2018-07-26
1
/ 68
Win32 EXE
DeskGoSetup
2018-09-12
1
/ 68
Win32 EXE
DeskGoSetup
2018-07-25
0
/ 66
Win32 EXE
WinPE_PreBoot_Support_1.4.4.exe
msvcp140.dll 0/66
hackers id 94.74.81.92:80 (TCP)
<MACHINE_DNS_SERVER>:53 (UDP)
DNS Resolutions
myfilesupload.biz
finally hacker id 
founded :
virus first founded virus created at 2018
in 2019 04 22 ( gdata )
Bejing sc. antvirus 2019 3-4 ??